Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File:                     tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier:          2kHdoac8zzXOJLG5E3AdDeF/PK28/ndn5Qf7JK9hwVM=
Subject key identifier:   E1:69:EA:16:91:DB:A6:6C:3E:AE:94:FD:3E:2E:A3:F7:83:79:77:D3
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer:       /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial:       0FE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number:          2E29
Signing time:             Tue 28 Jul 2026 16:48:57 +0000
Manifest this update:     Tue 28 Jul 2026 16:48:56 +0000
Manifest next update:     Tue 04 Aug 2026 16:48:56 +0000
Files and hashes:         1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: YoRIXD8bcXEsMsUddlcUdYLcgcm/56QC8nezY02P1IA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4064 (0xfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
        Validity
            Not Before: Jul 28 16:48:56 2026 GMT
            Not After : Aug  4 16:48:56 2026 GMT
        Subject: CN=6a68dd78-d2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:ae:0a:b7:55:ea:dd:15:bb:2c:74:58:73:
                    7e:63:14:61:57:5f:43:00:2d:e7:ad:36:40:bd:5e:
                    59:fd:c6:81:0f:0f:92:ba:21:5e:21:ba:52:22:3d:
                    01:7c:18:76:c1:17:5b:09:f5:56:47:73:8f:53:17:
                    04:bc:50:f9:05:f4:98:2c:58:d9:be:da:c8:de:45:
                    0b:4f:de:76:d3:1a:05:a0:25:df:bd:25:30:65:01:
                    3e:46:44:f4:4d:fb:dc:19:69:49:75:82:fd:e3:af:
                    07:77:56:2f:d6:52:ec:73:6d:75:bf:29:40:f8:f2:
                    6c:9f:91:10:21:f2:9b:54:7e:dc:cc:98:c6:0c:c4:
                    ea:4b:07:0f:01:b9:99:73:05:08:e3:02:fd:7c:43:
                    21:b6:96:d3:19:67:57:06:db:35:ec:b9:ee:ca:2d:
                    d9:37:d7:0d:a3:ae:73:ce:e5:35:f9:8d:a5:34:63:
                    15:44:09:87:e1:12:0f:a6:df:1d:21:ce:c4:9e:50:
                    cb:42:3f:43:fd:ac:0b:de:42:e0:89:37:ed:b1:85:
                    78:06:ca:55:6f:50:9b:95:e7:a9:45:0e:fe:de:bf:
                    c8:7a:ee:8b:d3:f6:49:a1:df:c8:bb:49:52:df:9f:
                    b6:d4:63:8b:69:38:d5:c8:91:45:b3:5a:8f:61:42:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:69:EA:16:91:DB:A6:6C:3E:AE:94:FD:3E:2E:A3:F7:83:79:77:D3
            X509v3 Authority Key Identifier:
                keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:17:2c:d9:22:fb:ad:2d:d3:8e:04:96:8d:56:db:c2:93:b1:
         7f:88:d8:0b:ad:0d:47:d7:55:fb:d9:98:44:03:bf:b9:a3:95:
         65:54:3b:69:7e:6d:1e:10:96:e5:40:85:cc:87:1f:0e:1d:1e:
         8b:1c:f0:e0:2f:72:94:a3:06:8b:87:e3:0a:c4:a1:58:3a:88:
         c1:a3:a8:90:a0:46:c4:d0:c2:f5:44:c4:f2:88:9c:dc:c5:84:
         8c:d6:6c:26:7c:cf:8a:6b:db:3e:5d:31:e3:d4:cf:4f:f2:4d:
         7d:08:88:cf:05:ca:8c:c2:3e:2f:e1:e0:ab:ae:58:cc:ce:a2:
         44:fc:be:0e:31:5d:64:5d:70:26:ca:98:e3:4b:9d:dd:2b:8b:
         4b:ae:fa:12:01:ef:d0:d3:f2:78:fe:c3:c0:ac:c9:5d:c3:92:
         38:9a:2c:d1:ab:e7:f4:46:d2:27:a1:32:ce:68:4f:a5:29:ab:
         86:d2:4a:dc:07:04:c9:3e:9b:74:53:5e:bd:a5:85:ee:0d:ac:
         9e:c7:0c:d2:08:22:9a:70:96:9c:71:3d:98:a6:09:8c:1b:94:
         83:c1:66:89:4d:8b:a9:16:85:58:d3:42:33:66:33:8c:29:f3:
         2b:fe:98:45:ac:69:f6:e1:2e:bf:55:3a:f8:f2:15:6e:a3:84:
         bb:7e:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:34 2026 by rpki-client